---
metadata:
- name: generator
content: Diplodoc Platform v5.50.6
alternate:
- https://www.yandex.com/support/common/en/security/connection-protection.md
- https://www.yandex.com/support/common/ru/security/connection-protection.md
---
> **Documentation Index:** Fetch the complete configuration index at https://www.yandex.com/support/common/en/llms.txt
# Secure connection
Sites where visitors enter personal data use a secure connection. Browsers check the connection and warn you if it's not secure. For example, if a site has certificate problems or unsafe content, you'll see an appropriate icon in the browser's address bar.
{% cut "**Security icons**" %}
Security icons are displayed in the address bar. To view connection status, click the icon.
#|
|| **Icon examples** | **Description** ||
|| — Yandex Browser
— Opera | The connection is secure. The [HTTPS](https://en.wikipedia.org/wiki/HTTP) protocol is used. ||
|| — Yandex Browser
— Mozilla Firefox | We can't guarantee that data is transferred securely. For example, the HTTPS protocol is used, but images are loaded over an insecure protocol. ||
|| — Yandex Browser
— Google Chrome | The insecure HTTP protocol is used. We don't recommended entering personal data, especially payment details, on such sites. ||
|| — Yandex Browser
— Mozilla Firefox | The page may pose a threat to your data. For example, the site may be a phishing one, it may have dangerous content or use an [untrusted certificate](#untrusted-sertificates). ||
|#
Learn more about security icons:
[Yandex Browser](https://yandex.ru/support/browser/en/security/protect-panel.html)
[Google Chrome](https://support.google.com/chrome/answer/95617?hl=en)
[Mozilla Firefox](https://support.mozilla.org/en-US/kb/how-do-i-tell-if-my-connection-is-secure)
[Opera](https://help.opera.com/en/latest/security-and-privacy/#securityBadges)
[Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/securely-browse-the-web-in-microsoft-edge-c7beb47a-de9e-4aec-839d-28224a13a5d2)
[Safari](https://support.apple.com/en-gb/guide/safari/sfri40697/14.0/mac/11.0)
{% endcut %}
{% cut "**Protection against unsafe content on HTTPS pages**" %}
The [HTTPS](https://en.wikipedia.org/wiki/HTTP) protocol supports encryption and is considered secure for the transfer of personal data. But an HTTPS connection is secure only if encryption applies to all page elements. Sometimes, a site page loads over HTTPS but has unencrypted plugins or JavaScript or CSS elements. Attackers can intercept and use them to hack the site. That is why browsers warn you about unsafe content and block it.
You can open unsafe content, but we don't recommend doing so.
Learn more about protection against unsafe content:
[Yandex Browser](https://yandex.ru/support/browser/en/security/noncrypted-https-blocking.html)
[Google Chrome](https://support.google.com/chrome/answer/95617?hl=en)
[Mozilla Firefox](https://support.mozilla.org/en-US/kb/mixed-content-blocking-firefox)
[Opera](https://help.opera.com/en/latest/security-and-privacy/)
[Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/securely-browse-the-web-in-microsoft-edge-c7beb47a-de9e-4aec-839d-28224a13a5d2)
{% endcut %}
{% cut "**Protection against untrusted certificates**" %}
If you visit a [phishing](https://www.yandex.com/support/common/en/security/phishing.md#fake-sites) site, hackers get all data (such as passwords and bank card numbers) that you enter. To prevent this from happening, secure sites use digital certificates that are issued by certification centers. The certificate provides secure data encryption and ensures that the site isn't a phishing one.
If the site has [certificate issues](https://yandex.ru/support/browser/en/security/untrusted-sertificates.html), browsers consider it untrusted and block it.
{% cut "**Why untrusted certificates are dangerous**" %}
On a website that doesn't have a trusted certificate, attackers can:
- Intercept or substitute your personal data and read your correspondence.
- Get your payment details (card number, owner's name, expiration date, and CVV2) and use them to steal money from your account.
{#untrusted-sertificates}
{% endcut %}
{% cut "**What to do if the site has an untrusted certificate**" %}
[Yandex Browser](https://yandex.ru/support/browser/en/security/untrusted-sertificates.html)
[Google Chrome](https://support.google.com/chrome/answer/95617?hl=en)
[Mozilla Firefox](https://support.mozilla.org/en-US/kb/what-does-your-connection-is-not-secure-mean)
[Opera](https://help.opera.com/en/latest/security-and-privacy/#securityCertificates)
[Microsoft Edge](https://support.microsoft.com/en-us/topic/-there-is-a-problem-with-this-website-s-security-certificate-when-you-try-to-visit-a-secured-website-in-internet-explorer-0b8931a3-429d-d0e2-b38f-66b8a15fe898)
[Safari](https://support.apple.com/en-gb/guide/safari/sfri40697/14.0/mac/11.0)
{% endcut %}
{% cut "**If you need to open a site with an untrusted certificate**" %}
1. Check and [correct the date and time](https://www.yandex.com/support/common/en/support/date-time.md) on your computer. If the time is set incorrectly on the computer, the browser may consider the certificate expired and [block the site](https://yandex.com/support/browser/en/security/protection#wrong-time).
1. [Clear the cache](https://www.yandex.com/support/common/en/browsers-settings/cache.md): the certificate problem may have been fixed in the new page version.
1. Disable browser extensions: they may change the site content.
[Yandex Browser](https://yandex.ru/support/browser/en/personalization/extension.html#actions)
[Google Chrome](https://support.google.com/chrome_webstore/answer/2664769?hl=en)
[Mozilla Firefox](https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons)
[Opera](https://help.opera.com/en/latest/customization/#extensions)
[Microsoft Edge](https://support.microsoft.com/en-us/microsoft-edge/add-turn-off-or-remove-extensions-in-microsoft-edge-9c0ec68c-2fbc-2f2c-9ff0-bdc76f46b026)
1. Disable ad blocking: ad blockers can also [replace the certificate](https://yandex.ru/support/browser/en/security/untrusted-sertificates.html#antivirus).
[Yandex Browser](https://yandex.ru/support/browser/en/security/ad-view-settings.html)
[Google Chrome](https://support.google.com/chrome/answer/7632919?hl=en)
[Opera](https://help.opera.com/en/latest/features/#adBlocker)
1. Disable the antivirus because it can [replace the certificate](https://yandex.ru/support/browser/en/security/untrusted-sertificates.html#antivirus). Please note that after you visit the site, the computer may be infected. Disable the antivirus only as a last resort.
1. Turn off [JavaScript support](https://www.yandex.com/support/common/en/browsers-settings/browsers-java-js-settings.md).
1. Disable the antivirus.
1. After visiting the site, turn on the antivirus and run a full scan of your computer for viruses.
{% cut "**If nothing helps, try reinstalling the root certificates (for Windows)**" %}
Update Windows (**Control Panel** (**Settings**) → **Windows Update**). If that doesn't help, try downloading and importing certificates manually:
1. Use the links to download the certificates to your computer
- [Certum CA](https://www.certum.pl/CA.pem)
- [Certum Trusted Network CA](https://www.certum.pl/CTNCA.pem)
- [GlobalSign Root CA - R1](https://secure.globalsign.net/cacert/Root-R1.crt)
- [GlobalSign Root CA - R3](http://secure.globalsign.net/cacert/root-r3.crt)
1. Certum CA and Certum Trusted Network CA certificates are downloaded in TXT format. Delete the `.txt` extension:
1. Open the Control panel in Windows.
1. Click **Folder Options** (in Windows 10 or 11, click **File Explorer Options**).
1. On the **View** tab, disable the **Hide extensions for known file types** option.
1. Click **Apply**.
1. Open the Certum CA certificate in Notepad and save it, deleting the `.txt` extension. You should get the `CA.pem` file as a result.
1. Open the Certum Trusted Network CA certificate in Notepad and save it, deleting the `.txt` extension. You should get the `CTNCA.pem` file as a result.
1. To import certificates, repeat the following steps for each of them:
1. Use the keyboard shortcut **Windows** + **R** or go to the **Start** menu search bar and type “Run”. In the dialog window that opens, enter the `certmgr.msc` command.
1. Open the **Trusted Root Certification Authorities** folder and then the **Certificates** folder.
1. Select **Action** → **All tasks** → **Import...**. This will launch the Certificate Import Wizard.
1. Click **Next**.
1. Select the certificate (the downloaded file) and click **Next**.
1. Make sure that the **Trusted Root Certification Authorities** option is selected in the **Certificate Store** box. Click **Next**.
1. Click **Finish**.
1. In the dialog window that opens, click **I agree**.
1. Restart the browser.